Skip to content

Stop parsing on a zero-length packet option#3373

Open
msuhanov wants to merge 1 commit into
nmap:masterfrom
msuhanov:master
Open

Stop parsing on a zero-length packet option#3373
msuhanov wants to merge 1 commit into
nmap:masterfrom
msuhanov:master

Conversation

@msuhanov

Copy link
Copy Markdown

Fixes #3368.

This is a minimal fix to cover DoS scenarios when real-world hosts return garbage in TCP options.

Fixes nmap#3368

Signed-off-by: Maxim Suhanov <dfirblog@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Packet:parse_options() in nselib/packet.lua allows uncontrolled memory consumption (DoS)

1 participant